$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft File: fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json) Hash identifier: GzwmTZ4IvdXnN9pJLSyIjO2ynPtU+Pw8/q9/JbrMUFY= Subject key identifier: C3:DC:BB:00:63:AC:A0:F0:C6:8C:53:99:DD:89:A7:CD:C2:B8:C2:40 Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 Certificate issuer: /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Certificate serial: 0448 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft Manifest number: 0441 Signing time: Sun 04 May 2025 23:54:29 +0000 Manifest this update: Sun 04 May 2025 23:54:28 +0000 Manifest next update: Sun 11 May 2025 23:54:28 +0000 Files and hashes: 1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: VB52Bn5Qd6ylC5ZyELfUNcew/9LYWdxsKMUfXVfejps=) 2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: R82yDGIsGFvNSThNuNqqir6NPI8oiHV+tooLUAlLp1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 23:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1096 (0x448) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55EC, serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Validity Not Before: May 4 23:54:28 2025 GMT Not After : May 11 23:54:28 2025 GMT Subject: CN=6817fe35-5410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a0:9b:6f:1d:f1:db:f6:4b:4c:cf:9c:b6:4a: 21:f6:d4:f3:28:12:e1:cf:16:a7:b8:d1:6d:3a:05: 8a:e8:d5:9b:f6:a1:41:16:c4:42:e4:16:e9:48:aa: 11:18:d0:54:8d:42:99:92:62:17:3d:49:9c:2a:7d: c2:05:60:92:cc:ca:01:7d:65:e1:0e:6d:6e:c0:2a: 56:b0:a6:14:93:9e:e1:bb:ec:d5:0f:37:56:07:9e: e3:7e:d5:87:23:f7:5c:9e:20:f0:1a:d9:fd:fc:ad: 73:45:36:c8:e8:fc:84:c1:3d:db:6a:e8:ed:c2:6a: 0e:14:98:01:8d:a2:87:9d:cb:5e:c5:9b:a4:6e:32: cf:10:e5:f3:48:54:17:fb:43:a0:54:6f:89:68:fb: 92:ce:5e:1e:07:ab:d6:aa:5e:47:d4:ab:3e:96:c2: f9:3d:a8:4b:4e:00:f6:95:35:43:ff:ca:44:8c:20: 47:3d:a1:b0:c8:1e:71:4e:76:a0:01:9b:4f:1a:51: 93:79:03:a4:6b:6c:13:06:cc:0e:b5:27:f0:77:2f: c3:d4:51:5b:1e:5d:1c:26:4d:c0:d6:bf:d7:71:55: 0a:de:ad:78:e8:0c:c5:2a:cc:cc:59:20:93:10:d3: 2c:f9:81:14:42:ef:3e:e7:67:ad:bc:bf:2f:1b:11: 32:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DC:BB:00:63:AC:A0:F0:C6:8C:53:99:DD:89:A7:CD:C2:B8:C2:40 X509v3 Authority Key Identifier: keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:46:a8:f7:a7:99:69:05:3e:fd:e7:bb:3f:16:8a:6b:ab:09: ed:c2:c6:5f:67:04:8f:8f:63:b3:fa:fb:08:c5:bb:d1:1a:e4: c6:a5:58:52:d7:b7:a6:4c:be:90:4b:fd:88:be:44:7b:3a:56: e1:73:c0:fb:20:76:dd:25:ae:47:bc:bc:03:60:d2:dd:ae:d0: 5e:49:55:2e:ba:2c:02:d7:66:01:fe:46:8d:29:60:28:95:0e: 00:7e:f5:96:76:aa:87:28:ab:86:ac:ee:47:45:b0:e9:21:4a: c2:d9:8e:35:aa:70:0e:6d:d6:ae:1f:42:30:1a:c7:9d:1f:e4: ce:9f:2e:41:28:8b:d3:6c:2c:aa:11:41:ba:9d:bd:3c:67:52: e9:54:c1:e2:0d:dc:0a:70:b9:a3:46:b7:41:64:da:e6:97:08: 0e:66:83:b8:26:ca:30:1b:5f:3a:26:65:fa:cc:cf:ce:cf:3b: 83:69:88:52:d7:d8:38:ed:bd:68:43:27:fe:af:a3:0a:b1:b3: 94:97:f6:57:a7:50:de:2b:0a:91:c8:83:cc:87:d0:e5:2e:f7: d1:9d:34:c3:7c:12:f6:76:51:3f:df:12:de:d1:2f:ed:6e:da: 97:59:04:9d:1f:91:b6:be:cc:72:5b:52:b0:98:e5:52:a8:d8: d8:30:3e:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1RUMxMTAvBgNVBAUTKDdEREQ4RERDRjE1NkU3QTE4MUExQjczOTdCMjRENDIw OTYzNTNERDgwHhcNMjUwNTA0MjM1NDI4WhcNMjUwNTExMjM1NDI4WjAYMRYwFAYD VQQDEw02ODE3ZmUzNS01NDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKCbbx3x2/ZLTM+ctkoh9tTzKBLhzxanuNFtOgWK6NWb9qFBFsRC5BbpSKoR GNBUjUKZkmIXPUmcKn3CBWCSzMoBfWXhDm1uwCpWsKYUk57hu+zVDzdWB57jftWH I/dcniDwGtn9/K1zRTbI6PyEwT3baujtwmoOFJgBjaKHnctexZukbjLPEOXzSFQX +0OgVG+JaPuSzl4eB6vWql5H1Ks+lsL5PahLTgD2lTVD/8pEjCBHPaGwyB5xTnag AZtPGlGTeQOka2wTBswOtSfwdy/D1FFbHl0cJk3A1r/XcVUK3q146AzFKszMWSCT ENMs+YEUQu8+52etvL8vGxEycQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPcuwBj rKDwxoxTmd2Jp83CuMJAMB8GA1UdIwQYMBaAFH3djdzxVuehgaG3OXsk1CCWNT3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVFQy9ERjY1REU5MjU3 ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2R0JvYmM1ZXlUVUlKWTFQ ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMk4zUEZXNTZHQm9iYzVleVRVSUpZMVBkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVFQy9ERjY1REU5MjU3ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2 R0JvYmM1ZXlUVUlKWTFQZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNRqj3p5lpBT7957s/FoprqwntwsZfZwSPj2Oz+vsIxbvRGuTGpVhS 17emTL6QS/2IvkR7Olbhc8D7IHbdJa5HvLwDYNLdrtBeSVUuuiwC12YB/kaNKWAo lQ4AfvWWdqqHKKuGrO5HRbDpIUrC2Y41qnAObdauH0IwGsedH+TOny5BKIvTbCyq EUG6nb08Z1LpVMHiDdwKcLmjRrdBZNrmlwgOZoO4JsowG186JmX6zM/OzzuDaYhS 19g47b1oQyf+r6MKsbOUl/ZXp1DeKwqRyIPMh9DlLvfRnTTDfBL2dlE/3xLe0S/t btqXWQSdH5G2vsxyW1KwmOVSqNjYMD4I -----END CERTIFICATE-----Generated at Mon May 5 12:17:02 2025 by rpki-client